Privacy
What this site sends, and where.
The services this website contacts are listed below.
What this site never loads
- No analytics of any kind.
- No tag manager, session recorder, heatmap or advertising pixel.
- No hosted fonts — the type you are reading is already on your device.
- No third-party scripts other than the bot check listed below.
- No cookies are set by this site on any public page.
The homepage requests the public AtMem star count from GitHub. GitHub receives your browser's request; the count is omitted if the request fails.
Every origin this site can contact
This table is generated from the allowlist the build enforces. A request to anything not listed here fails the build, so this page cannot drift from what the site actually does.
| Origin | Why | Where | When |
|---|---|---|---|
| https://api.github.com | Shows the current public GitHub star count for AtMem on the homepage. | / | When you open the homepage |
| https://firestore.googleapis.com | Stores your waitlist submission. | /waitlist | Only when you press submit |
| https://firebaseappcheck.googleapis.com | Confirms the submission came from this website and not an automated client. | /waitlist | Only once you start filling in the form |
| https://www.google.com | Runs Google's reCAPTCHA check that the submission is not automated. Loads only once you start filling in the form. | /waitlist | Only once you start filling in the form |
| https://www.gstatic.com | Serves the reCAPTCHA code itself. Loads only once you start filling in the form. | /waitlist | Only once you start filling in the form |
Additionally, the private administration page at /admin uses https://identitytoolkit.googleapis.com to sign administrators in. No public page contacts it.
If you join the waitlist
- What we store: your email address, and your name and note if you choose to give them. Nothing else — no IP log, no device fingerprint, no hidden fields.
- Where: Google Firestore, in the Firebase project behind this site.
- Who can read it: two named administrators. This is enforced by database rules, not by hiding a page — an unauthorised account is refused by the server, not by the browser.
- What we use it for: telling you what we build next. Nothing is sold, shared or passed to an email marketing service.
- How long: 24 months from submission if nothing comes of it, then deleted automatically.
- Removal: email privacy@atmem.ai and we will remove it within 30 days. That is a person doing it, not an automated process.
The bot check
The waitlist form is open to anyone, with no account. That makes it a target for automated submissions, so Google reCAPTCHA checks each submission through Firebase App Check.
It is the only third-party script this site loads anywhere. It loads on the waitlist page only, and only once you start filling in the form — not when you open the page. Google receives the information reCAPTCHA needs to make that judgement, and is subject to its own privacy terms. We use its answer for one thing: accepting or rejecting the submission.
Something here not matching what you observe? Tell us atprivacy@atmem.ai — a mismatch between this page and the site's behaviour is a bug we treat as serious.